As reported by Josef Cacek:

All fatal exception are swallowed in JASPIServerAuthenticationManager.isValid() method.

// PicketBox 4.0.9 used in EAP 6.0.0 - TRACE level
      catch(AuthException ae)
      {
         if(trace)
            log.trace("AuthException:",ae);
      }
// PicketBox 4.0.14 - DEBUG level
      catch(AuthException ae)
      {
          PicketBoxLogger.LOGGER.debugIgnoredException(ae);
      }

It includes configuration errors, which should absolutely be visible on ERROR log level or another relevant level.

We need to make sure to use ERROR log if the user-defined module cannot be found for instance.